😘Volatility Framework Update: Version 2.7.0 is Here!

Volatility specializes in analyzing memory dumps across various operating systems and enables us to explore the state of a system at the time of the memory dump.

• Running Processes
• Active Network Connections
• Loaded Drivers | DLLs
• Code Injections
• Malware Artifacts
• Executed commands
• Opened files
• and many more

☺️ https://github.com/volatilityfoundation/volatility3/releases/tag/v2.7.0

#volatility
تیم سورین

⚙️ Splunk Integration with PersistenceSniper

This integration allows you to detect persistence techniques at the Windows level.

🧩 https://github.com/Mohammad-Mirasadollahi/Splunk-TA-PersistenceSniper-Deploy

Credit By : mohammad-mirasadollahi

#Splunk
تیم سورین

🔎 Splunk-CrowdStrike Hunting Cheat Sheet 🔎

با این راهنمای ضروری، مهارت های شکار تهدید خود را تقویت کنید!

#Splunk
تیم سورین

💎ChatGPT for Digital Forensic

Large collection of examples of using #chatgpt for #dfir:

Artefact identification
Incident response
Searching
Programming
and more.

#⃣https://github.com/markscanlonucd/ChatGPT-for-Digital-Forensics

#DFIR #chatgpt
تیم سورین

📸incident Response Projects for Beginners

Hands-on projects designed to enhance your cybersecurity skills:

- Phishing Attack Investigation
- Malware Analysis and Containment
- Network Intrusion Detection and Response
- DDoS Attack Detection and Response

💎https://github.com/0xrajneesh/Incident-Response-Projects-for-Beginners

#IR
تیم سورین

🛡 Tools and Techniques for Blue Team / Incident Response

👩‍💻 https://github.com/A-poc/BlueTeam-Tools

#cybersecurity #infosec #BlueTeam
تیم سورین

▶️splunk SIEM Pack◀️

دمو جلسه اول کلاس
برگزار شده در سورین
🕵🏻‍♂️مدرس : مهندس احمدرضا نوروزی

#splunk #SIEM
تیم سورین

➕Overview of Splunk Instances and Components

Linkedin #⃣
تیم سورین

چند مخزن بسیار کاربردی برای Red Team ⭐️و Blue Team ⭐️

➡️https://github.com/Purp1eW0lf/Blue-Team-Notes
➡️https://github.com/boh/RedBlueNotes
➡️https://github.com/CyberJunnkie/BlueTeaming-Notes
➡️https://github.com/Hacking-Notes/BlueTeam

#RedTeam #BlueTeam
تیم سورین

📘 این راهنمای ضروری برای تقویت امنیت سایبری خود با Splunk را از دست ندهید!
📚 Ultimate Splunk for Cybersecurity

#Splunk
تیم سورین

↔️CVE-2024-37079, -37080, -37081: Multiple vulns in VMware vSphere and vCenter, 7.8 - 9.8 rating 🔥🔥🔥

RCE via heap overflow and local privilege escalation in several VMware products.

👉 Dork: http.noscript:"ID_VC_Welcome" OR certificate.issuer.domain_component:"vsphere"

Vendor's advisory: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453

تیم سورین